EUVD-2026-65175

Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...

PT-2026-81516

Name of the Vulnerable Software and Affected Versions NVIDIA NemoClaw affected versions not specified Description NVIDIA NemoClaw for Linux contains a flaw in its inference server setup that allows a remote attacker to access the inference service without authentication. The issue occurs when the...

cve-2019-9053-py3

CVE-2019-9053 — Exploração SQLi no CMS Made Simple Python 3 Aviso: Esta ferramenta destina-se apenas a testes de penetração autorizados e fins educacionais. Executá-la contra sistemas sem permissão explícita por escrito é ilegal. O autor não assume nenhuma responsabilidade por uso indevido. Visão...

CVE-2015-7808

CVE-2015-7808 Codice PoC per la vulnerabilità PreAuth di vBulletin Utilizzo: perl vbulletin.pl www.vbulletin.com/forum id...

CVE-2026-78264

CVE-2026-78264 is an unauthenticated Cross-Site Scripting (XSS) vulnerability affecting the WordPress Toolset Blocks plugin in versions 1.6.26 and earlier . The CNA (Patchstack) assigns a CVSS 3.1 base score of 7.1 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a network-explo...

EUVD-2026-63565

django CMS: Plugin move endpoint allows cyclic reparenting DoS...

CVE-2023-27350

CVE-2023-27350 POC per CVE-2023-27350 che colpisce PaperCut MF/NG Versioni Affette 'PaperCut MF o NG versione 8.0 o successive escluse le versioni corrette su tutte le piattaforme OS.' Riepilogo Questo POC utilizza una vulnerabilità di bypass dell'autenticazione concatenata con l'abuso della...

CVE-2024-10924

CVE-2024-10924 Really Simple Security Free, Pro e Pro Multisite 9.0.0 – 9.1.1.1 – Bypass de Autenticação Descrição Os plugins Really Simple Security Free, Pro e Pro Multisite para WordPress são vulneráveis a bypass de autenticação nas versões 9.0.0 a 9.1.1.1. Isto deve-se ao tratamento inadequado...

CVE-2023-40600

CVE-2023-40600 EWWW Image Optimizer = 7.2.0 - Nicht authentifizierte Offenlegung sensibler Informationen über Debug-Log Beschreibung Das EWWW Image Optimizer Plugin für WordPress ist in allen Versionen bis einschließlich 7.2.0 über die Funktion debuglog anfällig für die Offenlegung sensibler...

CVE-2026-39975 Combodo iTop: Remote code execution using external auth variable value

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, unauthenticated users could delete the .readonly file on iTop instances, leading to code execution. This file, created during the setup process, prevents users from performing write actions. This issue has been fixed in versi...

PoC-for-CVE-2021-38540-

CVE-2021-38540 Prova di concetto Autenticazione mancante su un componente critico noto come CVE-2021-38540 Informazioni su questo bug: L'endpoint di importazione delle variabili non era protetto da autenticazione in Airflow =2.0.0, =2.0.0, variables List Variables Sorgente della PoC: root@kitploi...

CVE-Newgen-Software-Advisories

Newgen Software – Provas de Conceito de CVE Este repositório contém material de Prova de Conceito PoC e documentação técnica para múltiplas vulnerabilidades CVE descobertas em produtos desenvolvidos por Newgen Software Technologies Limited. As vulnerabilidades documentadas aqui são CVEs...

CVE-2026-77915

rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...

exposecheck

EXPOSECHECK Führen Sie das Tool nur gegen Server aus, die Ihnen gehören oder für die Sie berechtigt sind, Tests durchzuführen. Umfang: Ein positives Ergebnis bedeutet lediglich, dass diese enge Prüfung eine Authentifizierungsherausforderung und eine Langflow-Version auf oder über dem gepatchten...

CVE-2025-59843-CVE-2025-59932

CVE-2025-59843 & CVE-2025-59932 1. Esposizione Pubblica degli Indirizzi Email degli Utenti CVE-2025-59843 Ambito / Applicazione Interessata: FlagForge Web Application Endpoint API: /api/user/username Dettagli: L'endpoint restituisce gli indirizzi email degli utenti senza autenticazione. Qualsiasi...

CVE-2026-77915 rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php

rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...

CVE-2026-77915 rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php

rConfig Core 8.0.0 before 8.2.13 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...

p4wned

P4WNED CVE-2026-6043 Strumenti di ricerca sulla sicurezza di Perforce Helix Core e nuclei templates. Articolo di ricerca: https://morganrobertson.net/p4wned/ Leggi il link sopra per i dettagli completi. Solo destinazioni autorizzate. Usalo sui tuoi server o con esplicita autorizzazione scritta...

CVE-2026-78386

RansomLook exposed sensitive operator-side scraping configuration through multiple unauthenticated API responses. Location records associated with ransomware groups and markets were returned largely verbatim to unauthenticated callers whenever the location itself was not marked as private. These...

CVE-2026-78370

RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to remain private. The /export/ endpoint permits selected internal databases to be exported without requiring authentication. While...